609 results about "Network router" patented technology

Systems, methods, and apparatus embodiments for electric power grid and network registration and management of active grid elements. Grid elements are transformed into active grid elements following initial registration of each grid element with the system, preferably through network-based communication between the grid elements and a coordinator, either in coordination with or outside of an IP-based communications network router. A multiplicity of active grid elements function in the grid for supply capacity, supply and / or load curtailment as supply or capacity. Also preferably, messaging is managed through a network by a Coordinator using IP messaging for communication with the grid elements, with the energy management system (EMS), and with the utilities, market participants, and / or grid operators.

A fluid infusion system as described herein includes a number of local “body network” devices, such as an infusion pump, a handheld monitor or controller, a physiological sensor, and a bedside or hospital monitor. The body network devices can be configured to support communication of status data, physiological information, alerts, control signals, and other information between one another. In addition, the body network devices can be configured to support networked communication of status data, physiological information, alerts, control signals, and other information between the body network devices and “external” devices, systems, or communication networks. Such external communication allows the infusion system to be extended beyond the traditional short-range user environment. One particular system embodiment includes a network router device that functions as a centralized storage, processing, and routing unit for data received from the body network devices. The network router device is configured to generate HTML documents (web pages) to facilitate Internet-based setup, management, and control.

A method and system for security monitoring in a computer network has a packet sink with filtering and data analysis capabilities. The packet sink is a default destination for data packets having an address unrecognized by the network routers. At the packet sink, the packets are filtered and statistical summaries about the data traffic are created. The packet sink then forwards the data to a monitor, the information content depending on the level of traffic in the network.

In a wide area network arrangement composed of some number of secure local networks and an Internet service provider (ISP) back-bone, LAN hosts are able to indirectly access network routers, through an ISP quality of service (QoS) module, to request that information transmitted during certain specified sessions be given priority treatment by the network.

A network router, comprising at least one network interface, and a processor, supporting an embedded web server to provide a remote virtual user interface, for controlling said at least one network interface, analyzing data passing through said at least one network interface and making decisions in dependence thereon, and communicating control information using a markup language through said at least one network interface.

An improved network router having a plurality of intelligent router ports. Each intelligent router port may have its own routing and / or forwarding engines. Thus, a centralized master routing and forwarding engine, existing in conventional routers, is not necessary. Accordingly, the bottlenecking problems associated with a centralized routing and forwarding engine are significantly reduced.

Systems, methods, and apparatus embodiments for electric power grid and network registration and management of active grid elements. Grid elements are transformed into active grid elements following initial registration of each grid element with the system, preferably through network-based communication between the grid elements and a coordinator, either in coordination with or outside of an IP-based communications network router. A multiplicity of active grid elements function in the grid for supply capacity, supply and / or load curtailment as supply or capacity. Also preferably, messaging is managed through a network by a Coordinator using IP messaging for communication with the grid elements, with the energy management system (EMS), and with the utilities, market participants, and / or grid operators.

Systems, methods, and apparatus embodiments for electric power grid and network registration and management of active grid elements. Grid elements are transformed into active grid elements following initial registration of each grid element with the system, preferably through network-based communication between the grid elements and a coordinator, either in coordination with or outside of an IP-based communications network router. A multiplicity of active grid elements function in the grid for supply capacity, supply and / or load curtailment as supply or capacity. Also preferably, messaging is managed through a network by a Coordinator using IP messaging for communication with the grid elements, with the energy management system (EMS), and with the utilities, market participants, and / or grid operators.

A wireless mobile router (140) includes wireless network interfaces (202) and (218) attached to a network controller (142). The wireless network interface (202) communicates with a cellular network (110) to access cellular network services. The wireless network interface (218) and the network controller (142) comprise a WLAN (170) or PAN (180) network router hosting a plurality of client devices. Each client device may access a wide area network, WAN over the cellular network. The wireless mobile router (140) is configured to exchange various cellular network signals with various WLAN and PAN networks. The wireless mobile router (140) is particularly suitable for use in a vehicle or at locations where WAN access is not readily available.

A system, apparatus, and method are described for a secure IoT wireless network configuration. For example, one embodiment of an Internet of Things (IoT) hub comprises: a local wireless communication interface to establish local wireless connections with one or more IoT devices and / or IoT extender hubs; a network router to establish network connections over the Internet on behalf of the IoT devices and / or IoT extender hubs; an authentication module pre-configured with a passphrase and a hidden service set identifier (SSID), the authentication module to receive a connection requests from the IoT devices and / or an IoT extender hubs and to grant the connection requests when the IoT devices and / or IoT extender hubs use the pre-configured passphrase and hidden SSID; and a firewall of the IoT hub to block all outgoing and incoming connection requests other than those directed to designated servers of an IoT service with known host names.

The network monitoring system comprises a network router with built-in monitoring data gathering. The network router includes channels through which data pass in packets. Each of the packets includes a packet header. The network router additionally includes a header copier and a packet generator. The header copier generates a header copy from the packet header of at least some of the packets. The packet generator receives the header copies and forms monitoring data packets from them. Each monitoring data packet additionally represents temporal data relating to the header copies included in it. A method of obtaining performance data relating to a data transmission network that includes a node passes data through the node in packets. Each of the packets includes a packet header. At least some of the packet headers are copied to obtain respective header copies as monitoring data from which monitoring data packets are formed. The monitoring data packets additionally represent temporal data relating to the header copies included in them. The monitoring data packets are transmitted and the performance data are generated from the monitoring data contained in the monitoring data packets.

A virtual private network enables private communications over a shared MPLS network between two or more private networks. The virtual private networks include a first router connected to the shared MPLS network and configured to dynamically distribute first router VPN information across the shared MPLS network. The first router VPN information includes a VPN identifier which is assigned to the first router. The VPN also includes a second router connected to the shared MPLS network and and configured to dynamically distribute second router VPN information across the shared MPLS network. The second router VPN information includes a VPN identifier which is assigned to the second router and which is identical to the VPN identifier assigned to the first router. The first and second routers are also configured to establish label switched paths therebetween. A method of automatically configuring virtual private networks over a shared MPLS network includes creating a link between a private network router and a shared network router. It also includes assigning a VPN identifier to the shared network router, assigning the same VPN identifier to at least one other shared network router, determining all shared network routers which are assigned the same VPN identifier, and creating at least two label switched paths between the shared network router and the other shared network routers.

In embodiments of the present invention improved capabilities are described for identifying unauthorized endpoints. The present invention includes computer implemented methods and systems for actively polling and monitoring network devices, such as network routers and switches, to obtain information on any or all of the endpoints on a network with which the router or switch may have communicated. Address information acquired through polling is compared with an authorized endpoint list, which is generated from information reported to the store by security agents on the authorized endpoints and which is stored in a security compliance store, in order to identify unauthorized endpoints. Methods and systems disclosed herein also include remediation measures to be taken on the unauthorized endpoints. Related user interfaces, applications, and computer program products are disclosed.

The invention is directed to configuring services in a packet switching network. Embodiments of the invention group existing service policies configured on network routers into policy groups, thereby enabling better management of service policies and policy overrides. This functionality can be useful for identifying redundant policies that may be eliminated by reconfiguring one or more of the network routers to reduce the overall network-wide number of policies, as well as provisioning new services in a manner that efficiently uses existing policies.

The accuracy of configuration data within routers of a network are critical in today's networks for security of the network, efficient operating of the network and to ensure corporate requirements, such as redundancy, are met. Since configuration data is typically entered and modified manually by technicians, considerable human errors occur. A configuration validation system provides an automated capability to ensure accuracy within the routers of a network. In this system, the validation is completed utilizing dynamically set conditions based upon the utilization of the router and a characteristic of the router, such as the model type. The utilization of the router includes the services that are supported by the router and the position of the router within the network, both of these criteria of the router having specific configuration requirements. The utilization of the routers can be detected by look-up within an inventory database and / or analysing the applicable configuration data. During the validation process, any discrepancies can be logged. At completion, these discrepancies can be listed within a report of configuration problems to be fixed or be automatically sent to the routers within the network to correct the configuration data.

System and method for collecting and analyzing information on application-level activity and other user information on a mobile data network. A platform non-intrusively and transparently monitors data activity on a mobile data network in real-time so that user-level information can be reported to an operator. The platform comprises a plurality of collectors, a data manager, and a report manager. The collectors communicate with network routers to almost all network data. The collectors inspect the data for IP addresses and correlate them to user mobile phone numbers. The data manager receives the data and augments it with information obtained by querying carrier information. The data manager stores the data and monitors it to see if it satisfies a set of defined real-time reports. The report manager then works with the data manager to develop and test new reports based on operator instructions for a specific report.

A virtual host computer is presented that includes a virtualization software platform, at least one virtual machine executed by the virtualization software platform, a private network segment configured to prevent communications with at least one external computer, a public network segment configured to facilitate communications with the at least one external computer, and a virtual routing module that is executed as a virtual image by the virtualization software platform. The virtual routing module is configured to communicate with the at least one virtual machine via the private network segment, communicate with the public network segment, and execute a tunneling layer to form a private virtual network segment between the at least one virtual machine and the at least one external computer.

Embodiments of the present invention provide a system and method for using network flows records exported from network routers to provide information about the traffic entering / exiting the device. Network routers or hubs can be configured to authorize or deny various types of network traffic between two network devices whose traffic transits via the router. The method presented describes the creation and application of access control lists on the router from information derived from the network flow information exported by the network router.

A database network router (DNR) in a database network includes a client access module and a database resource manager that communicate with each other using a common software interface. The client access module communicates with clients including application servers and external database servers; and the database resource manager communicates with the database servers. The DNR also includes a protocol manager for handling multiple database protocols. The database network router also includes local data cache storage to store commonly used data objects, results of parsed query statement, non-optimized query statements, and optimized alternatives and assigns a priority to each client on log-in. The DNR provides a method for connections pooling, a method for balancing the load in a database networks and a method for synchronizing the data stored in cache memory with the database network and method for synchronizing the data stored in cache memory with the database to insure data reliability. The DNR also provides a method for monitoring and optimizing data queries to improve the performance of the database network. The DNR also provides a method to migrate from an old to a new version of the database.

An apparatus comprising a cordless, mains powered mesh network router. The mains powered mesh network router includes a controller configured to initiate a first indication when the mains powered mesh network router is mounted to an electrical outlet, and initiate a second indication when the controller joins a mesh network. Other devices, methods and systems are disclosed.

High availability BGP4 is based on redundant hardware as well as redundant software that replicates the RUN state of BGP4. There are two copies, respectively active and backup, of BGP4 running on two separate redundant hardware platforms. All BGP4 internal implementations apply various methods to replicate the running state of BGP4 independently of peer network routers. When this hardware or software fails on one redundant hardware platform, peer routers are unaware of the failure. Internally, based on duplicative states, the local router recovers from the failure and keeps the protocol running. During the recovery period, the local router can bring up a backup again. In the HA architecture, these activities are not detected by peer routers, such that there is no instability to the Internet backbone caused by BGP4 failure.

A data server system / method allowing cloud data server functionality in a coordinated / concerted fashion within network configurations that are local to and / or spanning network gateway routers is disclosed. The system may utilize a smart gateway power controller (SGPC) augmented with storage media and / or expansion slots to interact within a home automation network (HAN) to permit the local HAN to operate as a distinct network and allow access to locally stored data from remote networks such as the Internet. The system permits inter-networking of HAN devices (including SGPCs) and integration of data management within home automation networks while still providing access to HAN data via external remote networks such as the Internet. The system / method allows remote network access to HAN device data from local / remote access devices including mobile phones, tablet computers, laptops, desktop computers, and the like.

Methods, apparatuses and systems directed to a network traffic synchronization mechanism facilitating the deployment of network devices in redundant network topologies. In certain embodiments, when a first network device directly receives network traffic, it copies the network traffic and transmits it to at least one partner network device. The partner network device processes the copied network traffic, just as if it had received it directly, but, in one embodiment, discards the traffic before forwarding it on to its destination. In one embodiment, the partner network devices are operative to exchange directly received network traffic. As a result, the present invention provides enhanced reliability and seamless failover. Each unit, for example, is ready at any time to take over for the other unit should a failure occur. As discussed below, the network traffic synchronization mechanism can be applied to a variety of network devices, such as firewalls, gateways, network routers, and bandwidth management devices.

A method and apparatus for packet coalescing within interconnection network routers. In one embodiment, the method includes the scan of at least one input buffer to identify at least two network packets that include coherence protocol messages and are directed to the same destination, but from different sources. In one embodiment, coherence protocol messages within the network packets are combined into a coalesced network packet. Once combined, the coalesced network packet is transmitted to the same or matching destination. In one embodiment, combining multiple network packets (each containing a single logical coherence message) into a larger, coalesced network packet amortizes the fixed overhead of sending a network packet including a single coherence message, as compared to the larger, coalesced network packet, to improve bandwidth usage. Other embodiments are described and claimed.

In a network router, a tree structure or a sorting network is used to compare scheduling values and select a packet to be forwarded from an appropriate queue. In the tree structure, each leaf represents the scheduling value of a queue and internal nodes of the structure represent winners in comparisons of scheduling values of sibling nodes of the tree structure. CBR scheduling values may first be compared to select a queue and, if transmission from a CBR queue is not timely, a packet may be selected using WFQ scheduling values. The scheduling values are updated to reflect variable packet lengths and byte stuffing in the prior packet. Scheduling may be performed in multiple stages.

A delay measurement technique according to an embodiment according to the present invention is based on the precept, ascertained by the inventors, that a link between network nodes will often contribute to the delay encountered between several different pairs of network nodes. Such a technique identifies the path between each pair of nodes by a list of links that form the path. Paths that are orthogonal are treated as being necessary for describing the delays encountered between nodes, and, once the requisite set of orthogonal paths has been derived, all other paths can be described in terms of one or more of these orthogonal paths. Such a technique also lends itself to matrix representation of the paths, and the use of matrix manipulation techniques in deriving delay and jitter.

A method is provided to allocate bandwidth from a first node to a second node in a optical network. The method begins by accepting a request from an end-user, who requests a virtual path between the first node and the second node. The first and second nodes are ones of a number of such nodes. Each one of the nodes is coupled to at least one other node by at least one of a number of optical links. The nodes and links form the optical network. The virtual path has a bandwidth requirement associated therewith. Next, the service provider determines an amount of bandwidth available between the first and the second nodes. The service provider then allocates at least a portion of the amount of bandwidth available between the first and second nodes equal to the bandwidth requirement, so long as the bandwidth requirement is not greater than the amount of bandwidth available between the first and second nodes.

Disclosed is a content based router, system and method of operation. Upon receipt of a data packet at in ingress router, the ingress router matches the content of the data packet against stored user subscriptions. In one embodiment, the content is described using XML data and the user subscriptions are defined by XML queries. The router assigns a routing label to the data packet based on the matching, and transmits the data packet to a second network router. Intermediate routers along the packets path then use the assigned label in combination with stored routing tables in order to determine next hop routing. Upon receipt at an egress router, the content of the message is matched against user subscriptions for those users serviced by the egress router, and the egress router provides the data packet to those end users whose subscriptions match the content. The assigned routing labels may define routing paths or routing trees.